CVE-2004-2100

CVE-2004-2100 concerns GeoHttpServer, where, when configured to authenticate users, an attacker can bypass authentication and access unauthorized files by supplying a URL containing %0a%0a (encoded newlines). Affected software: GeoHttpServer (authentication-enabled configuration). Root cause: cra...

CVE-2004-2097

The CVE-2004-2097 entry applies to SuSE Linux 9.0 and describes a local-privilege issue where a symlink attack on several temporary files (e.g., /tmp/fvwm-bug, /tmp/wmmenu, /tmp/rates, /tmp/xf86debug.1.log, /tmp/.winpopup-new, /tmp/initrd) allows a local user to overwrite arbitrary files. The roo...

CVE-2004-2125

The CVE-2004-2125 entry describes a local privilege escalation in BlackICE PC Protection before 3.6.ccb, caused by a buffer overflow in blackd.exe when a long packetLog.fileprefix value is written into the application’s INI file. Affected product: BlackICE PC Protection 3.6 and earlier (3.6.ccb)....

CVE-2004-2133

CVE-2004-2133 affects CVSup 16.1h and third‑party packages (e.g., SuSE Linux). The vulnerability stems from untrusted paths in the ELF RPATH fields of certain executables, which could allow local users to cause cvsup to link against malicious libraries created in world‑writable directories such a...

kernel security update

CentOS Errata and Security Advisory CESA-2005:472 Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 3 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel...

Berlios GPSD 1.91-1 2.7-2 - Format String

Berlios GPSD 1.91-1 2.7-2 - Format String require 'msf/core' class Metasploit3 'Berlios GPSD Format String Vulnerability', 'Description' = %q This module exploits a format string vulnerability in the Berlios GPSD server. This vulnerability was discovered by Kevin Finisterre. , 'Author' = 'Yann...

Berlios GPSD 1.91-1 < 2.7-2 - Format String

require 'msf/core' class Metasploit3 'Berlios GPSD Format String Vulnerability', 'Description' = %q This module exploits a format string vulnerability in the Berlios GPSD server. This vulnerability was discovered by Kevin Finisterre. , 'Author' = 'Yann Senotier ' , 'License' = MSFLICENSE, 'Versio...

CVE-2004-2081

S CVE-2004-2081 affects Sami FTP Server 1.1.3. Local users can trigger a denial of service (pmsystem.exe crash) by issuing FTP commands: (1) CD with a tilde (~) or /../, or (2) GET for an unavailable file. This is the vulnerability described in the CVE entry; exploitation details are not provided...

CVE-2004-2090

CVE-2004-2090 : Microsoft Internet Explorer 5.0.1 through 6.0 is vulnerable via the VBScript LoadPicture method, which can be used by remote attackers to determine whether arbitrary files exist by observing error codes returned when the file is missing. The description in connected documents conf...

CVE-2004-2089

CVE-2004-2089 affects Matrix FTP Server. The vulnerability (remote denial of service) occurs when an attacker logs in with four spaces as both username and password and then issues a LIST command, causing a crash. Documents do not provide root-cause details beyond this description, nor any offici...

CVE-2004-2086

CVE-2004-2086 affects Sambar Server prior to 6.0, with a stack-based buffer overflow in /search/results.stm that can be triggered by an HTTP POST containing a long query parameter, leading to denial of service and potential code execution. Public references in connected docs show exploit activity...

CVE-2004-2074

CVE-2004-2074 affects BolinTech Dream FTP Server 1.02. A format string vulnerability in handling PASS and RETR commands allows a local user to crash the service (DoS). Public references document a Metasploit/Exploit-DB presence validating the flaw and citing public proofs of concept. The CVSS bas...

CVE-2004-2080

CVE-2004-2080 affects Red-M Red-Alert 2.7.5 with software 3.1 build 24. The issue is that multiple spaces in an SSID are collapsed to a single space, which prevents Red-Alert from correctly identifying the SSID. The connected documents confirm the affected product/version and the underlying cause...

CVE-2004-2073

Technical details beyond the initial description are not provided in the connected documents; monitor for updates.

CVE-2004-2073

Linux-VServer 1.24 allows local users with root privileges on a virtual server to gain access to the filesystem outside the virtual server via a modified chroot-again exploit using the chmod command...

CVE-2004-2087

CVE-2004-2087 affects SandSurfer prior to version 1.7.0. The provided sources describe an access issue in which an attacker could gain access as a logged-in user (per CVE entry) and, per Nessus content, an authentication bypass affecting versions up to 1.6.5. The exact root cause is not consisten...

CVE-2004-2075

CVE-2004-2075 affects Sophos Anti-Virus 3.78. The vulnerability allows remote attackers to cause a denial of service (infinite loop) by sending a MIME header that is not properly terminated. The provided documents do not include exploit code, active exploit status, or a remediation/patch. No addi...

CVE-2004-2076

The CVE-2004-2076 entry describes a cross-site scripting (XSS) vulnerability in Jelsoft vBulletin 3.0.0 RC4 identified via search.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML by manipulating the query parameter, enabling possible theft of cookies or sessio...

CVE-2004-2082

The CVE-2004-2082 entry describes a DoS in Sami FTP Server 1.1.3: remote authenticated users can crash pmsystem.exe by sending a GET request with a large number of leading “/” characters. This is the explicit vulnerability detail available in the records. No remediation or fix is provided in the ...

CVE-2004-2079

Red-M Red-Alert 2.7.5 with software 3.1 build 24 is affected: authentication is bound to client IPs, allowing remote attackers to bypass authentication by connecting from the same IP as an active authenticated user. No explicit root cause, affected components, versions beyond what's stated are pr...